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DETAILED ACTION 

Response to Amendment 

1 . This office action is in response to the amendment filed 1 1/05/08. Claims 1,6,13 
and 21 have been amended; claim 20 has been canceled. 



Response to Arguments 

2. Applicant's arguments, with respect to the rejection of claims 13 and 15-19 under 
35 U.S.C. 101 as failing to be limited to embodiments which fall within a statutory 
category, have been fully considered but they are not persuasive. Applicant argues that 
the term "tangible" has on ordinary and customary meaning in the art, it is improper to 
import "carrier wave" embodiments into the claims (page 9). The term "tangible" has 
been widely used in the art to cover not only storage media but also transmission media 
including carrier wave. Since (i) there is no definition or discussion of the term 
"tangible" in the specification, and (ii) the specification disclose that data storage 
devices include read-only memory, random-access memory, CD-ROMs, DVDs, 
magnetic tape, optical data storage devices, and carrier waves (par. 0090), the claimed 
subject matter is interpreted to cover "carrier waves", which does not fall within one of 
the four statutory classes of § 101 . Applicant is suggested to amend the specification to 
associate the term "tangible storage device" with statutory embodiments to overcome 
the 101 rejection. 

3. Applicant's arguments, with respect to the rejections of claims 1 under 35 USC 
102(e) as being anticipated by Lesser et al. (US 2005/0028006), have been fully 
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considered but they are not persuasive. Claim 1 recites the step "changing the state of 
the process-driven security policy for the electronic document automatically based on 
an internal or external system event, wherein the changed state is based on a 
transition role associated with the event". Claim 20 depends on claim 1 and recites the 
limitation "wherein the event is a user- triggered event". In light of claim 20, the step 
"changing the state of the process-driven security policy for the electronic document 
automatically based on an internal or external system event" is interpreted to be any 
action, including one performed by a user, that changes the state of the policy. In the 
Office Action mailed 08/06/08, claim 1 was rejected under Lesser, which discloses 
changing the state of the process-driven security policy for the electronic document 
automatically based on an action(s) performed by a user upon the system, (i.e., the 
Director of Research transfers the document to the VP Compliance and activates the 
Review policy), wherein the changed state is based on a transition rule associated with 
the event (i.e., document research -> document review -> document publishing) (figure 
1; figures 2-3, step 7; fig. 5, step 12). 

Applicant argues the Examiner's interpretation of the term "automatically" is 
overboard and unreasonable (see page 10). As explained above, the Examiner's 
interpretation is based on that of Applicant (i.e., the combination of claim 1 and 
dependent claim 20 suggests that the changing step does not exclude a user's 
action/interaction with the system). 

Applicant also argues that since claim 20 was canceled by the amendment filed 
1 1/05/08, the term "automatically" must be interpreted in light of the specification as "do 
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not require user or administrator interaction" (page 1 1 ). First, dependent claim 8, which 
is still in consideration, also suggests that the term "automatically" includes a user's 
action/interaction with the system. Second, since Applicant interprets the term 
"automatically" in two different ways (i.e., with user interaction as in claims 8 and 20, 
and without user interaction), it is quite reasonable for the Examiner or one of ordinary 
skill in the art to do so. Third, canceling claim 20 and/or claim 8 does not change the 
interpretation of the term "automatically" and the scope of the independent claims. If 
Applicant had intended for the changing step to be performed without user interaction, 
the claims must be amended to clearly recite such a limitation. 

4. Applicant's arguments, see pages 13-14, with respect to the rejection of claims 6, 
8-13 and 15-19 under 35 U.S.C. 102(b) as being anticipated by Downs et al 
(6,226,618), have been fully considered and are persuasive. The rejection has been 
withdrawn. 



Specification 

5. The specification is objected to as failing to provide proper antecedent basis for 
the claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01 (o). Correction 
of the following is required: appropriate amendment to the description to provide clear 
support/antecedent basis for the term "tangible", which was added to claim 13 in the 
amendment filed 10/16/07. 
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Claim Rejections - 35 USC § 101 

6. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

7. Claims 1-6, 8-12 and 21 are rejected under 35 U.S.C. 101 as not falling within 
one of the four statutory categories of invention. While the claims recite a series of 
steps or acts to be performed, a statutory "process" under 35 U.S.C. 101 must (1) be 
tied to a particular machine, or (2) transform underlying subject matter (such as an 
article or material) to a different state or thing. See page 10 of In Re Bilski 88 USPQ2d 
1385. The instant claims are neither positively tied to a particular machine that 
accomplishes the claimed method steps nor transform underlying subject matter, and 
therefore do not qualify as a statutory process. The method of claim 1 including the 
recited steps is broad enough that the claim could be completely performed mentally, 
verbally or without a machine nor is any transformation apparent. Claim 6 is rejected on 
the same basis as claim 1 . 

8. Claims 13 and 15-19 are rejected under 35 U.S.C. 101 as failing to be limited to 
embodiments which fall within a statutory category. Claim 13 is directed to a data 
storage device including computer program code. According to the specification, such a 
data storage device includes carrier waves (i.e., the computer readable medium is any 
storage device, and examples of the computer readable medium includes carrier 
waves) (see Specification, page 23, paragraph 0090), which does not fall within one of 
the four statutory classes of § 1 01 (see MPEP 21 06). 
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Claim Rejections - 35 USC § 102 

9. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

10. Claims 1-6, 8-9, 11-13, 15-16 and 18-21 are rejected under 35 U.S.C. 102(e) as 
being anticipated by Leser et al. (2005/0028006). 

1 1 . Regarding claim 1 , Leser discloses a method for limiting access to an electronic 
document (Abstract) comprising: 

creating a process-driven security policy having a plurality of states, with each of 
the states having a different set of access restrictions (figures 1-5; paragraphs 0096, 
0106); 

associating an identifier to the process-driven security policy (i.e., 
research/review/publish policy) (fig. 1, element 14; figures 2-5); 

making the identifier available to certain of users or groups of users (fig. 1 5, 
element 124; paragraph 0191); 

associating the electronic document with at least one of the states of the 
process-driven security policy to impose access restrictions on an electronic document 
(i.e., attaching the document with a control policy tag (CPT) identifying a control policy) 
(fig. 6, element 23; fig. 8; paragraph 0132); and 
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changing the state of the process-driven security policy for the electronic 
document automatically based on an action(s) performed by a user upon the system, 
(i.e., the Director of Research transfers the document to the VP Compliance and 
activates the Review policy), wherein the changed state is based on a transition rule 
associated with the event (i.e., document research -> document review -> document 
publishing) (figure 1; figures 2-3, step 7; fig. 5, step 12). A broad and reasonable 
interpretation of the claimed limitation "an internal or external system event" reads on 
any action performed by a user upon the system. 

12. Regarding claim 2, Leser further discloses that the identifier is a classifier (i.e., 
research/review/publish policy) (fig. 1, element 14; figures 2-5). 

1 3. Regarding claims 3-4, Leser further discloses that the process-driven security 
policy is provided or part of a document security system in which the identifier is 
assigned to a document when the document is created (i.e., providing a policy to a new 
document) (fig. 6, elements 22-23; paragraphs 0146, 0194-0195). 

14. Regarding claim 5, Leser further discloses that the process-driven security policy 
is provided or part of a document security system in which the identifier is assigned to 
multiple documents when the multiple documents are created (i.e., providing a policy to 
a new document, and protecting multiple documents by a single policy) (fig. 6, elements 
22-23; paragraphs 0146, 0194-0195). 

1 5. Regarding claim 21 , Leser further discloses that the event is a user-triggered 
event occurring at or received at a client machine (i.e., the state of the process-driven 
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security policy for a document changes when the user transfers the document using 
his/her computer) (fig. 16, step 136). 

16. Regarding claim 6 representative of claim 13, Leser discloses a method for 
imposing access restrictions on an electronic document comprising: 

providing at least one process-driven security policy to a client machine (fig. 17, 
steps 140-142), the process-driven security policy having a plurality of states associated 
therewith with each of the states having a different set of access restrictions (fig. 1 , 
elements 14; figures 2-5; paragraph 0106); 

associating an electronic document with at least one of the states of the process- 
driven security policy (i.e., associating new document with a security policy having a 
plurality of states) to impose access restrictions on the electronic document, the access 
restrictions being dependent on the at least one of the states of the process-driven 
security policy (fig. 17, steps 144-147); and 

subsequently changing the state of the process-driven security policy for the 
electronic document automatically based on an action(s) performed by a user upon the 
system (i.e., the Director of Research transfers the document to the VP Compliance and 
activates the Review policy), wherein the changed state is based on a transition rule 
associated with the event (i.e., document research -> document review -> document 
publishing) (figure 1; figures 2-3, step 7; fig. 5, step 12). A broad and reasonable 
interpretation of the claimed limitation "an internal or external system event" reads on an 
action(s) performed by a user upon the system. 
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1 7. Regarding claims 8-9 and 1 5-16, Leser further discloses that the event is a user- 
triggered event occurring at or received at the client machine (i.e., the state of the 
process-driven security policy for a document changes when the user transfers the 
document using his/her computer) (fig. 16, step 136). 

18. Regarding claims 1 1 and 18, Leser further discloses that the method is 
performed on a plurality of documents on a document-by-document basis (i.e., not 
every document is associated with the process-driven security policy) (paragraph 0151). 

1 9. Regarding claims 1 2 and 1 9, Leser further discloses that a plurality of electronic 
documents are protected by the process-driven security policy at the client machine 
(i.e., different personnel works on reports protected by the policy) (paragraph 0101). 

Claim Rejections - 35 USC § 103 

20. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

21 . Claims 1 0 and 1 7 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Leser as applied to claims 6 and 13 above, and further in view of Martin et al. 
(2003/0217264). Leser does not disclose that the electronic document includes security 
information, and the security information includes an indication of the state of the 
process-driven security policy for the electronic document. Martin discloses a method 
and system for protecting electronic document using a process-driven security policy, 
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i.e., state-based access control policy, wherein the electronic document is processed by 
a user at one state of a workflow and then transferred to another user at the next state 
of the workflow (Abstract; fig. 1 , elements 8-9; paragraph 001 5). Martin further 
discloses that the electronic document includes a signature of the document signed by 
the user at each state before the signed document is transferred to the next state (fig. 4, 
steps 70-72; paragraph 0022). It would have been obvious to one of ordinary in the art 
at the time the invention was made to modify Leser method such that the electronic 
document includes a signature of the document signed by the user at each state before 
the signed document is transferred to the next state, as taught by Martin. Using the 
signature, the user at the next state would be able to verify that the electronic document 
had not been altered from the time the user at the previous state signed the electronic 
document (paragraph 0022). 



Double Patenting 

22. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, All 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
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be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

23. Claims 6, 1 2-1 3 and 1 9 are provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 21-22, 24 and 28 
of copending Application No. 10/676474. Although the conflicting claims are not 
identical, they are not patentably distinct from each other because, with one exception, 
all of the limitations in the instant claims are present in the corresponding claims of 
Application '474. The one exception is that whereas the instant claims use a process- 
driven security policy, the '474 claims use a reference to the process-driven security 
policy, However, having a reference to an object (e.g., a pointer, link, URL, etc.) is 
functionally equivalent to having the object itself. Therefore, using a reference to an 
object is an obvious variation of using the object itself, and is not a patentable difference 
between the two set of claims. 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MINH DINH whose telephone number is (571)272-3802. 
The examiner can normally be reached on Mon-Fri: 10:00am-6:30pm. 



Application/Control Number: 10/677,049 Page 12 

Art Unit: 2432 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Minh Dinh/ 
Examiner, Art Unit 2432 
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